DevSecOps Engineer

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Integrate security protocols into CI/CD pipelines to guarantee the secure delivery of software.

• Design and establish automated security measures throughout the development, build, and deployment processes.

• Conduct security evaluations, including static (SAST), dynamic (DAST), and dependency vulnerability scanning.

• Collaborate with development, QA, and DevOps teams to detect and address security vulnerabilities.

• Implement and oversee secrets management, identity and access controls, and encryption strategies.

• Monitor systems for potential security threats and respond to incidents promptly.

• Ensure adherence to company security policies, standards, and regulatory mandates.

• Perform risk assessments and assist with threat modeling initiatives.

• Advocate for secure coding practices and offer guidance to development teams.

• Maintain security documentation, including policies, procedures, and audit reports.

⛳️ Requirements

• 3–6+ years of experience in DevOps, cybersecurity, or DevSecOps positions.

• Strong comprehension of application security principles and secure SDLC methodologies.

• Experience with security testing tools (SAST, DAST, SCA tools like SonarQube, Checkmarx, or OWASP ZAP).

• Practical experience with CI/CD tools (Jenkins, GitLab CI/CD, Azure DevOps).

• Familiarity with cloud security in environments such as OCI, AWS, or Azure.

• Knowledge of container security and orchestration tools (Docker, Kubernetes).

• Experience with identity and access management (IAM), secrets management, and encryption methods.

• Understanding of compliance frameworks (ISO 27001, NIST, SOC 2) is essential.

• Proficiency in scripting languages (Python, Bash, or PowerShell).

• Certifications such as CISSP, CEH, GIAC, CKS, CKA, Docker, and Terraform (some required).

• AWS Certified Security or Azure Security Engineer or Google Professional Cloud Security Engineer is mandatory.

• Strong analytical, problem-solving, and communication abilities.

• Advanced English proficiency (C1) is required.

• Experience working with U.S. clients is essential.

🏝️ Benefits

• Contractor model

• Remote work model

• Salary in $USD

• Paid vacations

• Day off for birthdays

• Benefits for courses and/or certifications

• Opportunity to collaborate with elite U.S. clients.

• Entrepreneurial and multicultural team culture.